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APPENDIX A 

This Appendix A sets forth a single clean version of the claims of the present application. 
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What is claimed is: 

1. A method of testing a J2EE application, wherein the J2EE application comprises 
modules, the method comprising the steps of: 

identifying (204), from an application deployment descriptor, modules comprised 
within the J2EE application; 

identifying, from an identified module, at least one QOS element; 
identifying, from the identified QOS element, a software resource to be tested; 
generating Java test code; 

identifying, for the software resource to be tested, a user identification and a user 
password for a user that is a member of a role intended to protect the software 
resource; and 

testing the software resource to be tested by use of the Java test code, including 
passing as parameters to the Java test code at run time the user identification and user 
password. 

2. The method of claim 1 wherein: 

at least one of the identified modules comprises a web module having a web module 
deployment descriptor; 

at least one of the identified QOS elements comprises a security-constraint element; 

identifying a software resource to be tested further comprises constructing, from a 
<web-uri> element in the application deployment descriptor and from a <url-pattem> 
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element in the web module deployment descriptor, a URI that identifies a software 
resource to be tested; and 

testing the software resource by use of the Java test code further comprises invoking 
the URI, wherein the invoking further comprises transmitting an HTTP request, 
wherein the HTTP request includes the URI, the user identification, and the user 
password. 

3. The method of claim 2 wherein testing the software resource by use of the Java test 
code further comprises passing as a parameter to the Java test code at run time the 
URI. 

4. The method of claim 2 wherein testing the software resource by use of the Java test 
code further comprises receiving an HTTP response. 

5. The method of claim 4 wherein testing the software resource by use of the Java test 
code further comprises determining in dependence upon the HTTP response whether 
the software resource is protected* 

6. The method of claim 1 wherein: 

at least one of the identified modules comprises an Enterprise JavaBean module 
CEJB module**) having a deployment descriptor; 

at least one of the identified QOS elements comprises a <method-pennission> 
restraint element; 

the <method-permission> restraint element comprises: 

a first <method-name> sub-element having a first <method-narne> sub- 
element value, and 
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a first <ejb-name> sub-element having a first <ejb-name> sub-element 
value; 

the identified software resource to be tested comprises a JavaBean method; 

identifying a software resource to be tested comprises the further steps of: 

finding in a deployment descriptor for the identified EJB module one or 
more <ent erpris e-b e an> elements having nested <ejb-name> sub-elements 
having values equal to the first <ejb-name> sub-element value, wherein 
each found <enterprise-bean> element comprises: 

the nested <ejb-name> sub-element, 
a <home> nested sub-element, 
a <remote> nested sub-element, and 
an <ejb-class> nested sub-element; and 



identifying, for each found <enterprise-bean> element, a method signature 
having a method name equal to the first <method-name> sub-element 
value; and 

testing the software resource by use of the Java test code comprises the further steps 
of: 

looking up the JavaBean home by use of a JNDJ home name for the 
software resource; 

creating, by use of the JavaBean home, an instance of the JavaBean; and 
invoking, in the created instance, the protected JavaBean method. 
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7. The method of claim 6 wherein testing the software resource by use of the Java test 
code further comprises passing as a parameter to the Java test code at run time the 
JNDI name for the JavaBean method. 

8. The method of claim 6 wherein testing the software resource by use of the Java test 
code further comprises logging in to an application environment by use of the user 
identification and the user password. 

9. The method of claim 6 wherein testing the software resource by use of the Java test 
code further comprises reporting whether invoking the protected JavaBean method 
succeeded. 

10. The method of claim 6 wherein identifying, for each found <enterprise-bean> 
element, a method signature having a method name equal to the first <method- 
name> sub-element value further comprises identifying, for each found <enterprise- 
bean> element, by use of Java reflection and the value of the <ejb-class> element, a 
method signature having a method name equal to the first <method-name> sub- 
element value. 

1 L A system of testing a J2EE application, wherein the J2EE application comprises 
modules, the system comprising: 

means for identifying (204), from an application deployment descriptor, modules 
comprised within the J2EE application; 

means for identifying, from an identified module, at least one QOS element; 

means for identifying, from the identified QOS element, a software resource to be 
tested; 

means for generating Java test code; 
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means for identifying, for the software resource to be tested, a user identification and 
a user password for a user that is a member of a role intended to protect the software 
resource; and 

means for testing the software resource to be tested by use of the Java test code, 
including means for passing as parameters to the Java test code at run time the user 
identification and user password. 

12. The system of claim 12 wherein: 

at least one of the identified modules comprises a web module having a web module 
deployment descriptor; 

at least one of the identified QOS elements comprises a security-constraint element; 

means for identifying a software resource to be tested further comprises means for 
constructing, from a <web-uri> element in the application deployment descriptor and 
from a <url-pattern> element in the web module deployment descriptor, a URI that 
identifies a software resource to be tested; and 

means for testing the software resource by use of the Java test code comprises: 

means for invoking the URI wherein the means for invoking further comprises means 
for transmitting an HTTP request, wherein the HTTP request includes the URI, the 
user identification, and the user password. 

13. The system of claim 13 wherein means for testing the software resource by use of 
the Java test code further comprises means for passing as a parameter to the Java test 
code at run time the URI. 
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14. The system of claim 13 wherein means for testing the software resource by use of 
the Java test code further comprises means for receiving an HTTP response. 

15. The system of claim 15 wherein means for testing the software resource by use of 
the Java test code further comprises means for determining in dependence upon the 
HTTP response whether the software resource is protected. 

16. The system of claim 12 wherein: 

at least one of the identified modules comprises an Enterprise JavaBean module 
("EJB module") having a deployment descriptor; 

at least one of the identified QOS elements comprises a <method-permission> 
restraint element; 

the <method-permission> restraint element comprises: 

a first <method-name> sub-element having a first <method-name> sub- 
element value, and 

a first <ejb-name> sub-element having a first <ejb-name> sub-element 
value; 

the identified software resource to be tested comprises a JavaBean method; 

means for identifying a software resource to be tested comprises: 

means for finding in a deployment descriptor for the identified EJB 
module one or more <enterprise-bean> elements having nested <ejb- 
name> sub-elements having values equal to the first <ejb-name> sub- 
element value, wherein each found <enterprise-bean> element comprises: 
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the nested <ejb-name> sub-element, 
a <home> nested sub-element, 
a <remote> nested sub-element, and 
an <ejb-class> nested sub-element; and 

means for identifying, for each found <enterprise-bean> element, a 
method signature having a method name equal to the fiTst <method-name> 
sub-element value; and 

means for testing the software resource by use of the Java test code comprises : 

means for looking up the JavaBean home by use of a JNDI home name for 
the software resource; 

means for creating, by use of the JavaBean home* an instance of the 
JavaBean; 

means for invoking, in the created instance, the protected JavaBean 
method. 

17. The system of claim 17 wherein means for testing the software resource by use of 
the Java test code further comprises means for passing as a parameter to the Java test 
code at run time the JNDI name for the JavaBean method. 

18. The system of claim 17 wherein means for testing the software resource by use of 
the Java test code further comprises means for logging in to an application 
environment by use of the user identification and the user password, 

19. The system of claim 17 wherein means for testing the software resource by use of 
the Java test code further comprises means for reporting whether invoking the 
protected JavaBean method succeeded, 
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20. The system of claim 17 wherein means for identifying, for each found <enterprise- 
bean> element, a method signature having a method name equal to the first 
<method-name> sub-element value further comprises means for identifying, for each 
found <enterprise-bean> element, by use of Java reflection and the value of the <ejb- 
class> element, a method signature having a method name equal to the first 
<method-name> sub-element value. 

21 . A computer program product of testing a J2EE application, wherein the J2EE 
application comprises modules, the computer program product comprising: 

a recording medium; 

means, recorded on the recording medium, for identifying (204), from an application 
deployment descriptor, modules comprised within the J2EE application; 

means, recorded on the recording medium, for identifying, from an identified module, 
at least one QOS element; 

means, recorded on the recording medium, for identifying, from the identified QOS 
element, a software resource to be tested; 

means, recorded on the recording medium, for generating Java test code; 

means, recorded on the recording medium, for identifying, for the software resource 
to be tested, a user identification and a user password for a user that is a member of a 
role intended to protect the software resource; and 

means, recorded on the recording medium, for testing the software resource to be 
tested by use of the Java test code, including means for passing as parameters to the 
Java test code at run time the user identification and user password. 
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22. The computer program product of claim 23 wherein: 

at least one of the identified modules comprises a web module having a web module 
deployment descriptor; 

at least one of the identified QOS elements comprises a security-constraint element; 

means, recorded on the recording medium, for identifying a software resource to be 
tested further comprises means for constructing, from a <web-uri> element in the 
application deployment descriptor and from a <url-pattern> element in the web 
module deployment descriptor, a URI that identifies a software resource to be tested; 
and 

means, recorded on the recording medium, for testing the software resource by use of 
the Java test code comprises: 

means, recorded on the recording medium, for invoking the URI wherein the means 
for invoking further comprises means for transmitting an HTTP request, wherein the 
HTTP request includes the URI, the user identification, and the user password. 

23. The computer program product of claim 24 wherein means for testing the software 
resource by use of the Java test code further comprises means for passing the URI as 
a parameter to the Java test code at run time, 

24. The computer program product of claim 24 wherein means for testing the software 
resource by use of the Java test code further comprises means for receiving an HTTP 
response. 

25. The computer program product of claim 26 wherein means for testing the software 
resource by use of the Java test code further comprises means for determining in 
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dependence upon the HTTP response whether the software resource is protected 

26. The computer program product of claim 23 wherein: 

at least one of the identified modules comprises an Enterprise JavaBean module 
("EJB module") having a deployment descriptor; 

at least one of the identified QOS elements comprises a <method-permission> 
restraint element; 

the <method-permission> restraint element comprises: 

a first <method-name> sub-element having a first <method-name> sub- 
element value, and 

a first <ejb-name> sub-element having a first <ejb-name> sub-element 
value; 

the identified software resource to be tested comprises a JavaBean method; 

means, recorded on the recording medium, for identifying a software resource to be 
tested comprises: 

means, recorded on the recording medium, for finding in a deployment 
descriptor for the identified EJB module one or more <enterprise-bean> 
elements having nested <ejb-name> sub-elements having values equal to 
the first <ejb-name> sub-element value, wherein each found <enterprise- 
bean> element comprises: 

the nested <ejb-name> sub-element, 

a <home> nested sub-element, 

a <remote> nested sub-element, and 
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an <ejb-class> nested sub-element; and 

means, recorded on the recording medium, for identifying, for each found 
<enterprise-bean> element, a method signature having a method name 
equal to the first <method-name> sub-element value; and 

means, recorded on the recording medium, for testing the software resource by use of 
the Java test code comprises: 

means, recorded on the recording medium, for looking up the JavaBean 
home by use of a JNDI home name for the software resource; 

means, recorded on the recording medium, for creating, by use of the 
JavaBean home, an instance of the JavaBean; 

means, recorded on the recording medium, for invoicing, in the created 
instance, the protected JavaBean method. 

27. The computer program product of claim 28 wherein means for testing the software 
resource by use of the Java test code further comprises means, recorded on the 
recording medium, for passing as a parameter to the Java test code at run time the 
JNDI name for the JavaBean method. 

28. The computer program product of claim 28 wherein means for testing the software 
resource by use of the Java test code further comprises means, recorded on the 
recording medium, for logging in to an application environment by use of the user 
identification and the user password. 

29. The computer program product of claim 28 wherein means for testing the software 
resource by use of the Java test code further comprises means, recorded on the 
recording medium, for reporting whether invoking the protected JavaBean method 
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succeeded. 

30. The computer program product of claim 28 wherein means for identifying, for each 
found <enterprise-bean> element, a method signature having a method name equal 
to the first <method-name> sub-element value further comprises means for 
identifying, recorded on the recording medium, for each found <enterprise-bean> 
element, by use of Java reflection and the value of the <ejb-class> element, a method 
signature having a method name equal to the first <method-name> sub-element 
value. 
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